Two Safe Wallets Lose $305,000 in FlashLoopAdapter Attack

Key points

• An exploit of the custom FlashLoopAdapter Safe module on Ethereum left two Safe wallets with a net loss of about 114.09 ETH, roughly $305,000.
• SlowMist said an access-control flaw in open() and close() let a malicious contract spoof a Safe check, using a Morpho WETH flash loan to unlock collateral.
• Aave CEO Stani Kulechov said the vulnerable component was a third-party external adapter with "zero effect on Aave v3" core contracts.

AI summary of Cryptonews’s report, written only from the publisher’s text. Read the original for full context.